Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/VPMX9a3pttq47Y1HrXLgmuloRHI.roa
File: VPMX9a3pttq47Y1HrXLgmuloRHI.roa (raw, json)
Hash identifier: jdxgepDzzzLqtIh1ifRj0Jsd3eLuLEfm5EClq3IMw5o=
Subject key identifier: 54:F3:17:F5:AD:E9:B6:DA:B8:ED:8D:47:AD:72:E0:9A:E9:68:44:72
Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3
Certificate serial: 0196C47D086F725E2F699EE7BB519DD72F9A
Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/VPMX9a3pttq47Y1HrXLgmuloRHI.roa
Signing time: Mon 12 May 2025 12:34:10 +0000
ROA not before: Mon 12 May 2025 12:34:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3170
IP address blocks: 83.97.16.0/22 maxlen: 24
83.97.16.0/24 maxlen: 32
91.240.224.0/24 maxlen: 24
185.17.196.0/22 maxlen: 24
185.175.90.0/24 maxlen: 24
188.64.34.0/23 maxlen: 24
188.64.36.0/22 maxlen: 24
193.35.56.0/22 maxlen: 24
193.105.188.0/24 maxlen: 24
194.69.165.0/24 maxlen: 24
195.74.52.0/22 maxlen: 24
195.144.8.0/24 maxlen: 24
195.191.218.0/23 maxlen: 24
2a03:ee40::/32 maxlen: 32
2a07:240::/29 maxlen: 48
2a10:4740::/29 maxlen: 48
2a11:2640::/32 maxlen: 32
2a11:2641::/32 maxlen: 32
2a11:2647::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 12 May 2025 16:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:7d:08:6f:72:5e:2f:69:9e:e7:bb:51:9d:d7:2f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3
Validity
Not Before: May 12 12:34:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54f317f5ade9b6dab8ed8d47ad72e09ae9684472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:66:b3:ba:26:d8:f6:d6:b2:81:82:0f:b6:
1e:14:d5:e3:fd:d3:a3:17:f6:0d:19:8c:d0:a7:7a:
46:80:62:5b:5f:a7:44:0a:3c:56:75:4d:b9:12:fc:
5a:9c:c5:36:ce:b4:33:e5:1f:24:6c:18:f6:49:f0:
33:e2:77:e0:55:a4:7a:ce:2f:8a:77:fe:e3:2b:13:
82:b1:22:89:1c:cd:97:e9:c5:69:bf:92:25:04:7b:
8a:09:a9:1e:19:cd:f4:8f:66:d0:2d:91:c5:b7:33:
15:66:7c:de:ca:78:78:70:1a:3d:ac:49:fb:9d:a7:
a5:c2:2c:96:1a:60:0e:04:6a:54:99:d7:ee:6f:fe:
3d:79:05:e7:84:a0:5f:43:89:91:f1:ce:30:4b:f2:
39:93:33:d2:8a:0e:0b:5a:7a:56:33:53:69:67:db:
da:dd:e6:52:84:8f:b2:ea:15:55:37:81:b3:bf:f5:
fa:f5:5e:ee:6c:cd:81:62:9f:77:8b:7c:5f:1c:5b:
25:b3:91:fc:81:03:1e:73:36:e5:35:24:03:f3:55:
4f:13:c2:77:2b:37:25:28:3e:3d:9e:4c:22:bc:7c:
ba:62:dd:15:ca:fa:74:b0:97:ba:83:1b:d5:9f:0b:
c2:4c:a5:c4:30:4b:40:51:09:7a:f8:50:3b:a3:21:
eb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F3:17:F5:AD:E9:B6:DA:B8:ED:8D:47:AD:72:E0:9A:E9:68:44:72
X509v3 Authority Key Identifier:
keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/VPMX9a3pttq47Y1HrXLgmuloRHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.16.0/22
91.240.224.0/24
185.17.196.0/22
185.175.90.0/24
188.64.34.0-188.64.39.255
193.35.56.0/22
193.105.188.0/24
194.69.165.0/24
195.74.52.0/22
195.144.8.0/24
195.191.218.0/23
IPv6:
2a03:ee40::/32
2a07:240::/29
2a10:4740::/29
2a11:2640::/31
2a11:2647::/32
Signature Algorithm: sha256WithRSAEncryption
73:84:49:36:7d:90:57:e8:c0:0c:24:4d:29:e5:4f:4a:e7:a4:
b4:c3:86:86:60:51:17:8a:2c:f8:fb:58:15:58:9c:84:ba:05:
13:c4:c7:0f:8c:2f:79:75:06:b6:fd:fc:25:16:9e:0c:b3:7a:
aa:b3:71:b6:3d:18:dc:66:9e:6e:d7:71:56:7f:32:15:9b:cf:
4f:d8:b2:75:89:76:4e:e0:53:0a:c6:0a:a8:75:28:6b:93:ea:
a9:ba:f6:c8:5a:c1:46:d7:e2:52:21:f0:be:7a:da:d4:16:d6:
04:33:db:8b:d5:46:31:84:0d:07:45:7e:2a:c1:7d:e4:0a:fd:
4f:a6:ee:5c:b3:4a:64:d2:74:b5:6a:51:e2:3e:50:35:ee:2c:
21:bd:be:10:b0:87:2c:7d:4b:42:61:3b:d8:02:1c:09:c1:68:
d1:38:78:ec:1f:79:67:e3:62:a5:08:fc:99:47:94:f0:99:42:
86:dc:88:af:f8:75:b6:a1:c8:7d:e0:a1:05:51:39:70:5e:2b:
6c:4a:93:82:9f:e9:bd:4c:43:3b:11:ee:3e:d9:87:64:c9:34:
13:7e:07:25:b6:75:e1:84:ba:06:ef:7c:c5:0b:2b:74:72:db:
b0:42:16:9b:bd:60:b2:09:c4:9c:8a:dc:d2:ed:58:78:b7:01:
27:72:b3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:03:31 2025 by rpki-client